fix(security): enforce audited account, network and resource boundaries

Implement B01-B06 with regression coverage and retained validation evidence. Preserve the production ingress preflight; F04 runtime verification remains open.
2026-09-09 18:21:47 +02:00
parent 7d641edc7b
commit 0954876295
116 changed files with 10101 additions and 122 deletions
@@ -0,0 +1,8 @@
+{
+  "ticket": "B03",
+  "date": "2026-09-08",
+  "before": { "source": "Permanent actual-exporter regression before application edits", "concurrentCalls": 2, "actualBrowserStubLaunches": 2, "safeAssertion": "failed as expected" },
+  "after": { "source": "Authenticated real API/controllers/exporter with inert process fixture", "configured": 2, "admittedDuringBurst": 2, "rejected": 10, "queued": 0, "maximumActualRenders": 2, "busyStatus": 503, "retryAfterSeconds": 3, "recoveryStatus": 200 },
+  "limitations": "Inert subprocesses prove actual launch admission, not Chromium peak memory, throughput, sandbox or production host sizing.",
+  "originalEvidencePreserved": true
+}